CVE-2006-0819

· N/AModified

← All CVEs

CVSS v3.1

N/A

EPSS

2.22%

Published

Mar 13, 2006

Modified

Jun 16, 2026

Public PoC / Exploit (1)

All weaponized →

TrickestTrickest PoC index

Links to public security research (Exploit-DB, Nuclei, Trickest, GitHub) for defensive use only.

Description

Dwarf HTTP Server 1.3.2 allows remote attackers to obtain the source code of JSP files via (1) dot, (2) space, (3) slash, or (4) NULL characters in the filename extension of an HTTP request.

Affected Products (1)

gnome · dwarf_http_servervulnerable

References (18)

http://secunia.com/advisories/18962

PatchVendor Advisory

http://secunia.com/secunia_research/2006-13/advisory

PatchVendor Advisory

http://securityreason.com/securityalert/576

http://securitytracker.com/id?1015779

http://www.osvdb.org/23836

http://www.securityfocus.com/archive/1/427478/100/0/threaded

http://www.securityfocus.com/bid/17123

http://www.vupen.com/english/advisories/2006/0937

https://exchange.xforce.ibmcloud.com/vulnerabilities/25178

http://secunia.com/advisories/18962

PatchVendor Advisory

http://secunia.com/secunia_research/2006-13/advisory

PatchVendor Advisory

http://securityreason.com/securityalert/576

http://securitytracker.com/id?1015779

http://www.osvdb.org/23836

http://www.securityfocus.com/archive/1/427478/100/0/threaded

http://www.securityfocus.com/bid/17123

http://www.vupen.com/english/advisories/2006/0937

https://exchange.xforce.ibmcloud.com/vulnerabilities/25178

KEV Catalog EPSS Scores Vendors All CVEs